Supply Chain Compromise Leads to Trojanized Installers

Rapid7 discovered that installers for Notezilla RecentX and Copywhiz hosted on conceptworld[.]com were trojanized to execute information-stealing malware. The malware can steal browser credentials crypto wallet info clipboard data and keystrokes as well as download additional payloads. Rapid7 disclosed the issue to Conceptworld who promptly removed the malicious installers.